ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 651:

  Which security approach will BEST minimize Personally Identifiable Information (PII) loss from a data breach?

  A. A strong breach notification process
  B. Limited collection of individuals' confidential data
  C. End-to-end data encryption for data in transit
  D. Continuous monitoring of potential vulnerabilities
  B. Limited collection of individuals' confidential data

• Question 652:

  Which of the following events prompts a review of the disaster recovery plan (DRP)?

  A. New members added to the steering committee
  B. Completion of the security policy review
  C. Change in senior management
  D. Organizational merger
  D. Organizational merger

• Question 653:

  Which of the following approaches is the MOST effective way to dispose of data on multiple hard drives?

  A. Delete every file on each drive.
  B. Destroy the partition table for each drive using the command line.
  C. Degauss each drive individually.
  D. Perform multiple passes on each drive using approved formatting methods.
  D. Perform multiple passes on each drive using approved formatting methods.

• Question 654:

  Which of the following addresses requirements of security assessment during software acquisition?

  A. Software assurance policy
  B. Continuous monitoring
  C. Software configuration management (SCM)
  D. Data loss prevention (DLP) policy
  B. Continuous monitoring

• Question 655:

  Which of the following is a method used to prevent Structured Query Language (SQL) injection attacks?

  A. Data compression
  B. Data classification
  C. Data warehousing
  D. Data validation
  D. Data validation

• Question 656:

  Which of the following is a canon of the (ISC)2 Code of Ethics?

  A. Integrity first, association before self, and excellence in all we do
  B. Perform all professional activities and duties in accordance with all applicable laws and the highest ethical standards
  C. Provide diligent and competent service to principals
  D. Cooperate with others in the interchange of knowledge and ideas for mutual security
  C. Provide diligent and competent service to principals

• Question 657:

  Which of the following trust services principles refers to the accessibility of information used by the systems, products, or services offered to a third-party provider's customers?

  A. Security
  B. Privacy
  C. Access
  D. Availability
  D. Availability

• Question 658:

  A new employee formally reported suspicious behavior to the organization security team. The report claims that someone not affiliated with the organization was inquiring about the member's work location, length of employment, and building access controls. The employee's reporting is MOST likely the result of which of the following?

  A. Risk avoidance
  B. Security engineering
  C. security awareness
  D. Phishing
  C. security awareness

• Question 659:

  When using third-party software developers, which of the following is the MOST effective method of providing software development Quality Assurance (QA)?

  A. Retain intellectual property rights through contractual wording.
  B. Perform overlapping code reviews by both parties.
  C. Verify that the contractors attend development planning meetings.
  D. Create a separate contractor development environment.
  B. Perform overlapping code reviews by both parties.

• Question 660:

  What is the ultimate objective of information classification?

  A. To assign responsibility for mitigating the risk to vulnerable systems
  B. To ensure that information assets receive an appropriate level of protection
  C. To recognize that the value of any item of information may change over time
  D. To recognize the optimal number of classification categories and the benefits to be gained from their use
  B. To ensure that information assets receive an appropriate level of protection